Connections

FoxIDs is configured with authentication methods and application registrations. Authentication methods sign in users directly or by trusting an external Identity Provider (IdP). Applications and APIs connect to FoxIDs through application registrations.

There are four different connection types:

• Login
• OpenID Connect
• OAuth 2.0
• SAML 2.0

Authentication method

FoxIDs supports three authentication method types:

• Login authentication method
• OpenID Connect authentication method
• SAML 2.0 authentication method

Authentication method session

Each authentication method creates its own session when a user is authenticated. There are two session types:

• Login authentication methods create a user session.
• OpenID Connect and SAML 2.0 authentication methods create an authentication method session that only stores limited the details and what is required to perform logout.

Both session types support configuring lifetime, absolute lifetime, and persistence (whether the session survives the browser closing).

Application registration

FoxIDs supports three application registration types:

• OpenID Connect application registration
• OAuth 2.0 application registration
• SAML 2.0 application registration

JWT and SAML

OpenID Connect, OAuth 2.0, JWT, and JWT claims are first-class citizens in FoxIDs. Internally, claims are always represented as JWT claims, and request/response properties use OAuth 2.0 and OpenID Connect attributes.

FoxIDs converts between standards by normalizing attributes into that internal representation. Therefore, SAML 2.0 claims are converted to JWT claims between the authentication method and the application registration.